VDB
DEBIAN-CVE-2024-6604
DEBIAN-CVE-2024-6604
PUBLISHED
CVSS 7.5 HIGH
Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | thunderbird | 0 |
| Debian:14 | thunderbird | 0 |
| Debian:14 | firefox-esr | 0 |
| Debian:12 | firefox-esr | 102.12.0esr-1, 102.12.0esr-1~deb10u1, 102.12.0esr-1~deb11u1 |
| Debian:12 | thunderbird | 1:115.7.0-1~deb11u1, 1:115.7.0-1~deb12u1, 1:115.8.0-1 |
| Debian:13 | firefox-esr | 0 |
Timeline
- Jul 9, 2024 CVE Published
- Sep 15, 2026 CVE Updated